CR Crosshire

Privacy Policy

Effective: 2026-05-09

1. Who we are

Crosshire is operated by Darshan Singh, a sole proprietor based in the European Union. Contact: darshansingh@crosshire.ch.

We are the data controller for personal data processed through Crosshire's website and services.

2. What we collect

  • Email address (when you submit a Try Me Summary or sign up)
  • CV content (text and structure extracted from your uploaded file)
  • Job description content (the JD you paste or upload)
  • Match results and Summary outputs (generated by our AI pipeline)
  • Technical data: IP address, browser type, pages visited, timestamps (via Plausible Analytics — privacy-friendly, no cookies)
  • Communication content if you email us

3. Why we process this data

  • To generate your Summary (legal basis: contract performance)
  • To deliver the Summary by email (contract performance)
  • To improve Crosshire's quality and accuracy (legitimate interest, with anonymized aggregations only)
  • To respond to your inquiries (contract / legitimate interest)
  • To comply with legal obligations (legal basis: legal obligation)

4. Who we share data with

We rely on a small number of third-party processors to operate Crosshire. Each is engaged under a data-processing agreement and only handles data necessary for its function.

  • Anthropic (Claude API) — processes your CV and JD content for parsing and reasoning. anthropic.com/legal/privacy
  • Google (Gemini API) — processes your CV and JD content for cross-validation. policies.google.com/privacy
  • Google Cloud (hosting) — provides compute infrastructure. Data hosted in EU region where available.
  • Infomaniak (email) — delivers transactional emails. Swiss-hosted, GDPR-compliant. infomaniak.com
  • Plausible Analytics (web analytics) — privacy-friendly, no cookies, no personal identifiers tracked. plausible.io/privacy

We do not sell, rent, or trade your personal data. We do not share data with advertisers.

5. International data transfers

Some of our processors (Anthropic, Google) are based in the United States. When we transfer your data to them, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission as the legal mechanism for international transfers. We host data in EU regions where the underlying provider supports it. For US-based AI processing of CV and JD content, transfers are limited to the duration of the request and the processors' own retention policies, which we surface in their linked privacy policies above.

6. How long we keep your data

  • Email address and Summary outputs: up to 24 months from your last interaction.
  • Raw CV and JD content: deleted from our systems after Summary generation completes and emails are dispatched, unless you have an active account that requires retention.
  • Aggregated, anonymized usage metrics: retained indefinitely for product analytics; they do not identify you.
  • Communications you send us by email: retained for as long as necessary to handle the request, then archived per applicable legal obligations.
  • You can request earlier deletion at any time (see Section 7).

7. Your rights

Under EU GDPR (Articles 15–22) you have the right to:

  • Access — request a copy of the personal data we hold about you.
  • Rectification — ask us to correct inaccurate or incomplete data.
  • Erasure — request deletion of your personal data where there is no overriding legal basis to retain it.
  • Portability — receive your data in a structured, machine-readable format.
  • Restriction — ask us to restrict processing while a dispute about accuracy or legal basis is resolved.
  • Objection — object to processing based on legitimate interests; we will stop unless we can demonstrate compelling grounds.
  • Withdraw consent — where processing is based on consent, you can withdraw it at any time.
  • Lodge a complaint — with your national supervisory authority.

To exercise any of these rights, email darshansingh@crosshire.ch. We respond within 30 days.

8. Automated decision-making

Crosshire uses automated processing — large language models — to generate fit scores and Summary outputs from the CV and JD you provide. This constitutes automated processing under EU GDPR Article 22. Crosshire outputs are advisory and probabilistic; they are intended to inform your own decision-making, not to replace it. The Summary is produced for you; we do not use it to make decisions about you, and we do not share it with employers, recruiters, or third parties on your behalf. You retain the right to obtain human review, contest a result, and request the principal factors behind it by emailing darshansingh@crosshire.ch.

9. Security

We use HTTPS in transit, encrypted storage at rest where supported by our providers, access controls limited to the operator, and rate-limiting on public endpoints. We keep our software dependencies patched and our processor list short to reduce attack surface. No system is perfectly secure; if you become aware of a vulnerability, please report it to darshansingh@crosshire.ch.

10. Children's data

Crosshire is not directed at children under 16, and we do not knowingly collect personal data from children under 16. If you believe a child has provided us personal data, contact darshansingh@crosshire.ch and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be highlighted on this page with a new effective date. Continued use of Crosshireafter the effective date constitutes acceptance of the revised policy. Older versions are available on request.

12. Contact

Data controller: Darshan Singh, sole proprietor, EU.
Email: darshansingh@crosshire.ch

A list of EU national supervisory authorities is available at edpb.europa.eu/about-edpb/about-edpb/members_en.